Troubleshooting BACnet in Wireshark

Not sure what is happening in your building network? Dealing with poor network performance? Use Wireshark, a free network packet analyzer, to dig into the network traffic to uncover the root cause of the issue. Wireshark is a free network packet analyzer that helps troubleshooting by capturing network packets and allowing you to browse the network traffic to isolate the issues in a network.
Join Pook-Ping Yao as he examines how to analyze BACnet communications in Wireshark to identify issues within a Building Automation System. Troubleshooting often has a technician on the hunt for erroneously chatty devices, missing acknowledgements, unanswered Who-Is, duplicate Device-IDs, and other obscure problems in the network. Join this webinar to learn simple checks, filters and tricks to troubleshoot and understand your BACnet building automation system quickly.
Pook-Ping Yao is Co-founder/CEO of Optigo Networks, a company that has recently launched Visual BACnet. Ping is a sought after speaker and writer in Canada and the United States, primarily discussing Building Automation Systems and technology in smart buildings driven by advances in the Internet of Things (IoT).
Want to get the inside scoop on our webinars? Subscribe to our newsletter: info.optigo.net...

[@AmitKumar-zk9pq]

How to I see BACnet APDU internals, like for RP APDU, I wanna see, what property is being read, etc?

[@OptigoNetworks]

Hi Amit. That is a great question! To do this, you would need to first find the two ReadProperty packets in Wireshark (Confirmed-REQ and Confirmed-ACK) from the two devices in question. They must have matching invoke IDs (you can expand the APDU to see this). The property being read will show in the request packet (Object Identifier) and the actual value will be found in the response packet (Property Identifier).

[@masterevan17]

What if you have a "malformed" packet that wireshark says is because an APDU service parameter field value is "too long", would that still be considered a possible physical cabling issue?

[@alialavi7242]

do you run classes?

[@OptigoNetworks]

Thanks for your question! We occasionally have online classes about our Visual BACnet platform, though none are scheduled at the moment. You can however register for our upcoming live webinar on troubleshooting with Visual BACnet! Link here: new.optigo.net/visual-bacnet-troubleshooting-webinar/